Cisco 350-401 Online Practice Questions and Exam Preparation

Cisco 350-401 Online Questions & Answers

• Question 121:

  If the maximum power level assignment for global TPC 802.11a/n/ac is configured to 10 dBm, which power level effectively doubles the transmit power?

  A. 13dBm
  B. 14 dBm
  C. 17dBm
  D. 20 dBm
  A. 13dBm

  ---

  Explanation

  Suppose a transmitter is configured for a power level of 10 dBm. A cable with 5-dB loss connects the transmitter to an antenna with an 8-dBi gain. The resulting EIRP of the system is EIRP = 10 dBm ?5 dB + 8 dBi = 13 dBm.

• Question 122:

  Refer to the exhibit. How does the router handle traffic after the CoPP policy is configured on the router?

  

  A. Traffic coming to R1 that does not match access list SNMP is dropped.
  B. Traffic coming to R1 that matches access list SNMP is policed.
  C. Traffic passing through R1 that matches access list SNMP is policed.
  D. Traffic generated by R1 that matches access list SNMP is policed.
  D. Traffic generated by R1 that matches access list SNMP is policed.

  ---

  Explanation

  Service Policy is in the output direction. So traffic generated by router will be policed.

• Question 123:

  Which data modeling language is commonly used by NETCONF?

  A. REST
  B. YANG
  C. HTML
  D. XML
  B. YANG

  ---

  Explanation

  Cisco IOS XE supports the Yet Another Next Generation (YANG) data modeling language. YANG can be used with the Network Configuration Protocol (NETCONF) to provide the desired solution of automated and programmable network operations. NETCONF(RFC6241) is an XML-based protocol that client applications use to request information from and make configuration changes to the device. YANG is primarily used to model the configuration and state data used by NETCONF operations. Reference:

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9500/software/release/1 6-5/ configuration_guide/prog/b_165_prog_9500_cg/data_models.pdf

• Question 124:

  Which feature does Cisco TrustSec use to provide scalable, secure communication throughout a network?

  A. security group tag ACL assigned to each port on a switch
  B. security group tag number assigned to each port on a network
  C. security group tag number assigned to each user on a switch
  D. security group tag ACL assigned to each router on a network
  C. security group tag number assigned to each user on a switch

  ---

  Explanation

  Cisco TrustSec uses tags to represent logical group privilege. This tag, called a Security Group Tag (SGT), is used in access policies. The SGT is understood and is used to enforce traffic by Cisco switches, routers and firewalls . Cisco TrustSec is defined in three phases: classification, propagation and enforcement.

  When users and devices connect to a network, the network assigns a specific security group. This process is called classification. Classification can be based on the results of the authentication or by associating the SGT with an IP, VLAN, or port-profile (-> Answer 'security group tag ACL assigned to each port on a switch' and answer 'security group tag number assigned to each user on a switch' are not correct as they say "assigned ... on a switch" only. Answer 'security group tag ACL assigned to each

  router on a network' is not correct either as it says "assigned to each router").

  https://www.cisco.com/c/dam/en/us/solutions/collateral/borderless-networks/trustsec/C07-730151-00_overview_of_trustSec_og.pdf

• Question 125:

  Which mechanism can be used to enforce network access authentication against an AAA server if the endpoint does not support the 802.1X supplicant functionality?

  A. private VLANs
  B. port security
  C. MAC Authentication Bypass
  D. MACsec
  C. MAC Authentication Bypass

• Question 126:

  What is a characteristic of VXLAN?

  A. It extends Layers 2 and Layer 3 overlay network over a Layer 2 underly.
  B. It has a 12-byte packet header.
  C. Its frame encapsulation is performed by MAC-in-UDP.
  D. It uses TCP for transport
  C. Its frame encapsulation is performed by MAC-in-UDP.

• Question 127:

  Which two descriptions of FlexConnect mode for Cisco APs are true? (Choose two.)

  A. APs that operate in FlexConnect mode cannot detect rogue APs.
  B. When connected to the controller, FlexConnect APs can tunnel traffic back to the controller.
  C. FlexConnect mode is used when the APs are set up in a mesh environment and used to bridge between each other.
  D. FlexConnect mode is a feature that is designed to allow specified CAPWAP-enabled APs to exclude themselves from managing data traffic between dents and infrastructure.
  E. FlexConnect mode is a wireless solution for branch office and remote office deployments.
  B. When connected to the controller, FlexConnect APs can tunnel traffic back to the controller.
  E. FlexConnect mode is a wireless solution for branch office and remote office deployments.

  ---

  Explanation

  A FlexConnect AP can, on a per-WLAN basis, either tunnel client data in CAPWAP to the controller (called Central Switching), or have client data egress at the AP's LAN port (called Local Switching). With Locally Switched WLANs, the AP can tag client traffic in separate VLANs, to segregate the traffic from its management interface.

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-2/configuration/guide/cg/cg_flexconnect.html https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/flexconnect.html#flexconnect-overview

• Question 128:

  How do cloud deployments differ from on-prem deployments?

  A. Cloud deployments require longer implementation times than on-premises deployments
  B. Cloud deployments are more customizable than on-premises deployments.
  C. Cloud deployments require less frequent upgrades than on-premises deployments.
  D. Cloud deployments have lower upfront costs than on-premises deployments.
  D. Cloud deployments have lower upfront costs than on-premises deployments.

• Question 129:

  Which unit is used to express the signal-to-noise ratio?

  A. mW
  B. db
  C. amp
  D. dbm
  B. db

  ---

  Explanation

  Signal-to-noise ratio (SNR or S/N) is the ratio of signal power to the noise power, and its unit of expression is typically decibels (dB).

• Question 130:

  Refer to the exhibit. Which command set must be applied on R1 to establish a BGP neighborship with R2 and to allow communication from R1 to reach the networks?

  

  A. router bgp 1200network 209.165.200.224 mask 255.255.255.224neighbor 209.165.202.130 remote-as 1201
  B. router bgp 1200network 209.165.201.0 mask 255.255.255.224neighbor 209.165.202.130 remote-as 1201
  C. router bgp 1200network 209.165.200.224 mask 255.255.255.224neighbor 209.165.202.130 remote-as 1200
  D. router bgp 1200network 209.165.200.224 mask 255.255.255.224neighbor 209.165.201.2 remote-as 1200
  A. router bgp 1200network 209.165.200.224 mask 255.255.255.224neighbor 209.165.202.130 remote-as 1201